$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa File: 08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa (raw, json) Hash identifier: FxKlIL3Iax2kXSZsqbSQjGr+nJWaM159Zk3/OErms4I= Subject key identifier: AC:E4:2F:6D:02:AC:CD:C5:2E:DB:48:10:95:92:E7:14:29:73:55:5B Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D524359CF2029003A725A4440 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16839 IP address blocks: 149.96.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:59:cf:20:29:00:3a:72:5a:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=c18f8175-123d-46b9-845d-f8cd023cb2b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0d:a6:64:68:a8:66:00:0a:0e:c5:f7:f1:4f: 18:16:10:e4:0b:45:05:56:2b:92:0a:cb:9a:66:b0: 49:2d:0f:2d:0b:e0:5a:6b:ac:71:59:a6:9c:af:9e: 1a:49:be:2d:64:be:aa:b6:9d:41:b5:a7:93:16:25: 58:7b:55:1b:79:65:13:74:59:76:05:42:4a:4f:ae: 03:7e:e1:39:8e:95:13:8b:9b:3d:97:1e:d8:22:cb: 1d:a5:53:12:af:29:d3:36:95:ce:96:94:f4:d6:78: 2f:bb:b1:9a:0c:20:21:48:15:73:61:07:8a:8e:6f: 02:af:c3:f8:91:5c:8e:e6:65:09:16:b2:0d:a6:48: 27:c1:d9:79:1f:ab:3d:15:94:1d:5a:e1:79:08:4a: 7d:87:39:a7:6f:67:0c:78:99:e2:20:03:d5:d4:e2: 44:fd:60:8e:3e:3e:04:8d:db:af:4c:96:b0:8f:c2: 9c:9e:7c:e8:00:cf:96:1f:9f:e4:af:18:3d:94:34: 45:eb:4d:a8:65:ce:98:91:37:34:73:0d:4c:80:e0: e9:87:c3:6d:87:97:78:4a:31:32:16:86:f4:04:52: 08:79:93:05:2a:d2:8e:8e:14:96:fb:65:c9:c6:1b: 81:fd:c1:71:c5:66:f2:9e:9e:e5:b2:07:ab:a5:ba: 50:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E4:2F:6D:02:AC:CD:C5:2E:DB:48:10:95:92:E7:14:29:73:55:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ba:26:3c:66:55:d3:28:9e:67:e3:82:e8:a0:b3:bb:d3:26: f6:05:05:ab:07:5b:7f:d8:58:01:5a:49:9c:82:44:fc:a0:45: e5:11:68:7c:35:11:5c:44:02:cb:fb:c5:d6:c4:9e:50:43:39: 9f:eb:c8:61:9d:a8:05:c2:2f:e6:12:94:d9:4d:84:0c:5b:dd: 34:dd:47:67:0c:bc:b6:0d:24:f3:d4:8c:56:43:aa:88:7d:81: 81:b6:98:80:d6:cd:d0:8a:59:f0:22:89:f3:e8:41:15:b4:d7: 31:d1:c3:90:7e:49:60:45:d1:4f:ad:0a:d8:de:71:b1:f6:b8: b5:5a:d9:76:89:c8:2b:94:51:09:c3:fa:52:4b:f7:e8:6b:3f: c5:ae:8f:1e:5c:10:ce:e4:02:1d:c9:e4:2e:ab:c1:04:7e:4a: 7f:7e:fe:cd:01:99:31:2b:3a:fd:35:c0:1e:48:cc:00:7a:40: a0:a9:3e:6c:8c:ec:97:5d:15:59:e0:0d:78:fc:81:1e:1c:9c: b7:67:20:87:c3:c5:d8:9c:b7:ad:8e:3b:cc:ec:59:52:fe:cf: a5:0f:df:c1:78:26:93:3c:d9:3a:5e:e8:88:c8:b0:8c:54:c6: 8d:9d:b9:6a:29:ee:e0:93:9b:b4:26:17:49:17:c3:b1:bc:91: a2:28:c2:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1nPICkAOnJaREAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk YzE4ZjgxNzUtMTIzZC00NmI5LTg0NWQtZjhjZDAyM2NiMmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ2mZGioZgAKDsX38U8YFhDkC0UFViuSCsua ZrBJLQ8tC+Baa6xxWaacr54aSb4tZL6qtp1BtaeTFiVYe1UbeWUTdFl2BUJKT64D fuE5jpUTi5s9lx7YIssdpVMSrynTNpXOlpT01ngvu7GaDCAhSBVzYQeKjm8Cr8P4 kVyO5mUJFrINpkgnwdl5H6s9FZQdWuF5CEp9hzmnb2cMeJniIAPV1OJE/WCOPj4E jduvTJawj8KcnnzoAM+WH5/krxg9lDRF602oZc6YkTc0cw1MgODph8Nth5d4SjEy Fob0BFIIeZMFKtKOjhSW+2XJxhuB/cFxxWbynp7lsgerpbpQTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzkL20CrM3FLttIEJWS5xQpc1VbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDhhZDdhZTEtNGJmYS0z ZDFjLTk2YWMtYTllMmNlYTE0MzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFa6JjxmVdMonmfjguigs7vTJvYFBasHW3/YWAFaSZyCRPygReURaHw1 EVxEAsv7xdbEnlBDOZ/ryGGdqAXCL+YSlNlNhAxb3TTdR2cMvLYNJPPUjFZDqoh9 gYG2mIDWzdCKWfAiifPoQRW01zHRw5B+SWBF0U+tCtjecbH2uLVa2XaJyCuUUQnD +lJL9+hrP8Wujx5cEM7kAh3J5C6rwQR+Sn9+/s0BmTErOv01wB5IzAB6QKCpPmyM 7JddFVngDXj8gR4cnLdnIIfDxdict62OO8zsWVL+z6UP38F4JpM82Tpe6IjIsIxU xo2duWop7uCTm7QmF0kXw7G8kaIowjc= -----END CERTIFICATE-----Generated at Sun Mar 29 17:46:10 2026 by rpki-client